Package Server is unable to download packages due to Windows permissions changes

Products

• Patch Management Solution for Windows
• IT Management Suite
• Deployment Solution
• Software Management Solution

Issue/Introduction

Windows permissions for the "Package Delivery" folder (and sub-directories) are being changed and this is causing errors in creating directory structure and downloading package files. This is because the Package Server Agent is unable to modify these directories.

8/2/2016 3:46:07 PM    CreateTargetDir    AeXNetComms.dll    Cannot write to directory: 0x80070005 [Access is denied] \\<HOSTNAME>\SWPKGS\Patch_Management\8ee14250-b05c-d252-02a4-a573e4b5adfc    AeXNSAgent.exe

Environment

ITMS/Altiris Package Servers - any currently supported version

Cause

This is caused by using the DACL Management registry key, found in KB157828, and not letting the Package Server Agent set permissions on Package Delivery directories. To work around this permissions will need to be reset to default settings.

Resolution

Please see the following steps to reset permissions on the GUID folders contained within Package Delivery, or other areas where packages may be stored.

1. Directories with a 'lock' icon next to the name indicate an issue with permissions:
   
2. To reset permissions open up an Administrator Command Prompt. To do so click 'Start>All Programs>Accessories', then right-click and select "Run as administrator".
3. Navigate to the directory in question, for example "C:\Program Files\Altiris\Altiris Agent\Package Delivery", and run one the following command against the directory that corresponds to the package GUID that won't download: 
   1. One package: icacls "<Package GUID>" /t /reset
   2. All packages (using a wildcard): icacls * /t /reset
4. Verify the directory/directories no longer have the 'lock' icon:
   
5. Click 'Start>Run' and type "services.msc"; click "OK". Restart the Symantec Management Agent and IIS services.
6. Open up the Symantec Management Agent; update configuration and send a basic inventory. Then select the 'Package Server' tab and click the "Refresh all packages" link. *This could take some time for the Package Server to validate and re-download the necessary package files.
7. Once the Package Refresh is complete the Package Server could now be able to modify directories and download package related files.